Chief Information Security & Privacy Leader

Amartha; Jakarta Pusat; On-site; IDR 800,000,000 - 1,600,000,000; Full time

Job summary

Amartha is seeking a Head of Information Security to lead the cybersecurity, data privacy, cloud resilience, and GRC strategy. You will protect Amartha’s digital ecosystem and customer data while ensuring strict regulatory compliance with OJK, BI, UU PDP, ISO 27001/27701.

You will head IT GRC & Data Privacy, Red Team, Blue Team, and Enterprise Security Engineering, championing security-by-design across product lifecycle and business operations.

Qualifications

• 12+ years of progressive experience in Information Security, Cybersecurity, and Data Privacy.
• 5+ years in a senior leadership role (Head of InfoSec, Director, CISO).
• Direct experience in Financial Services / Fintech (Lending, Microfinance, Payments).
• Strong understanding of OJK and Bank Indonesia cybersecurity & risk governance.

Responsibilities

• Define, drive, and evolve Amartha’s Information Security vision and strategy.
• Lead and mentor GRC, Red Team, Blue Team, Enterprise Security, and Data Privacy teams.
• Ensure ISO 27001/27701, SOC 2, NIST CSF, GDPR, and UU PDP compliance across the org.
• Oversee security operations: CI/CD security, cloud posture, SIEM/SOC, incident response.

Skills

GRC

Data Privacy

Cloud Security

DevSecOps

Threat Intelligence

Incident Response

IAM/PAM

Security Architecture

Zero Trust

Executive Communication

Education

Bachelor’s or Master’s in Computer Science/IT/Engineering

Tools

AWS

GCP

SIEM/SOC

EDR/XDR

CI/CD Security

Job description

Amartha is seeking a Head of Information Security to lead the cybersecurity, data privacy, cloud resilience, and GRC strategy. You will protect Amartha’s digital ecosystem and customer data while ensuring strict regulatory compliance with OJK, BI, UU PDP, ISO 27001/27701.

You will head IT GRC & Data Privacy, Red Team, Blue Team, and Enterprise Security Engineering, championing security-by-design across product lifecycle and business operations.